chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
eslint (source)	7.23.0 -> 7.24.0
node	14.16.0 -> 14.16.1

---

Release Notes

eslint/eslint

v7.24.0

Compare Source

• 0c346c8 Chore: ignore pnpm-lock.yaml (#​14303) (Nitin Kumar)
• f06ecdf Update: Add disallowTemplateShorthand option in no-implicit-coercion (#​13579) (Remco Haszing)
• 71a80e3 Docs: fix broken links in Node.js API docs toc (#​14296) (u-sho (Shouhei Uechi))
• bd46dc4 Docs: Fix incorrect reference to "braces" in arrow-parens (#​14300) (emclain)
• 0d6235e Docs: update header in max-lines (#​14273) (Shinigami)
• 70c9216 Docs: Update issue triage to include blocked column (#​14275) (Nicholas C. Zakas)
• abca186 Docs: Fix typo in suggestions section (#​14293) (Kevin Partington)
• c4d8b0d Fix: no-unused-vars ignoreRestSiblings check assignments (fixes #​14163) (#​14264) (YeonJuan)
• b51d077 Update: add ignoreNonDeclaration to no-multi-assign rule (fixes #​12545) (#​14185) (t-mangoe)
• c981fb1 Chore: Upgrade mocha to 8.3.2 (#​14278) (Stephen Wade)
• 147fc04 Docs: Fix repro:needed label in bug report template (#​14285) (Milos Djermanovic)
• e1cfde9 Docs: Update bug report template (#​14276) (Nicholas C. Zakas)
• c85c2f1 Docs: Add fatal to Node.js API LintMessage type (#​14251) (Brandon Mills)

nodejs/node

v14.16.1

Compare Source

This is a security release.

Notable Changes

Vulnerabilities fixed:

• CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
  • This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
  • Impacts:
    • All versions of the 15.x, 14.x, 12.x and 10.x releases lines
• CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
  • This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
  • Impacts:
    • All versions of the 15.x, 14.x, 12.x and 10.x releases lines
• CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
  • This is a vulnerability in the y18n npm module which may be exploited by prototype pollution. You can read more about it in GHSA-c4w7-xm78-47vh
  • Impacts:
    • All versions of the 14.x, 12.x and 10.x releases lines

Commits

• [467be7a950] - deps: upgrade npm to 6.14.12 (Ruy Adorno) #​37918
• [6bc8f58182] - deps: update archs files for OpenSSL-1.1.1k (Tobias Nießen) #​37938
• [403a014ef6] - deps: upgrade openssl sources to 1.1.1k (Tobias Nießen) #​37938

---

Configuration

📅 Schedule: "before 3am on Monday" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.